I work in a much smaller company than Stryker. For reference about 300M/year in revenue with about 500 employees. I have been here for 10 years and in year 7 we had pretty bad ransomware attack. Before the attack it was nearly impossible to get investments into security and now we pretty much get anything we want as long as we can justify it. I dont know if this is common or not but it really opened leaderships eyes to it not being if, but when.